Secure LDAP (LDAPS) Support

For LDAPS support, follow these steps:

Note:

The procedure in "Configuring Apache for Authenticating with LDAP Service" must be followed before executing the following steps to configure LDAPS:

1. Copy the CA certificate from the LDAP server and place it in a directory other than /root.

   /opt/certs/<CA Certificate>

2. Give permissions for the directory which has the CA certificate.

   chmod -R 777 /opt/certs

3. Modify the/etc/hosts file with a fully qualified DNS.

   "<DNS-IP> <Host Name> <Fully Qualified Host Name>"

4. Modify /etc/httpd/conf.d/pld.conf to have the following line after CustomLog:

   LDAPTrustedGlobalCert CA_BASE64 </opt/certs/<CA Certificate>

5. Modify the "AuthLDAPURL" URL from ldap to ldaps.

   AuthLDAPURL "ldaps://<Host Name>/dc=oracle,dc=com?uid,employeeType,gecos?one"